Outt
Sett
Behavioral task
behavioral1
Sample
661333b63e7ec608714db7cb84004aab_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
661333b63e7ec608714db7cb84004aab_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
661333b63e7ec608714db7cb84004aab_JaffaCakes118
Size
64KB
MD5
661333b63e7ec608714db7cb84004aab
SHA1
aad97d411631e19ff64a506f79a7829a79ec1601
SHA256
ab3fec3ab2281dcc9afd7948ce8583db3ad8c64eea903edb8af80b0ac6af5552
SHA512
9f112958b2b8e6e294979e80d2922686c6868a5202817d3c9097475bac7a3cfaa735dd151b8bda7a32a3ef99bf4252f53a70fa8a43c1716d6a628b09332b2c7d
SSDEEP
1536:mPO6KEVbsVP0gRFgXj2lHbAoPweJxPqAX88bX6bp1D:cMEVbsVc1Xq5FPwmf88GD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
661333b63e7ec608714db7cb84004aab_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ